A C++/Asm template for PIC/EXE/DLL malware
☆24Aug 12, 2025Updated last year
Alternatives and similar repositories for Imperium
Users that are interested in Imperium are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- PPLwindow PPL Bypass via GetProcessHandleFromHwnd☆55Dec 29, 2025Updated 10 months ago
- Async BOF for NTLMv2 Hash Snooping from ETW☆13Apr 2, 2026Updated 7 months ago
- Implementing an early exception handler for hooking and threadless process injection without relying on VEH or SEH☆140Aug 31, 2025Updated last year
- Prime a process for injection when S1 is present☆13Feb 8, 2025Updated last year
- ☆12Feb 26, 2025Updated last year
- Proton VPN Special Offer - Get 70% off • AdSpecial partner offer. Trusted by over 100 million users worldwide. Tested, Approved and Recommended by Experts.
- Thats it! An Open-Source Windows UEFI Rootkit☆42Jul 19, 2025Updated last year
- ☆10May 26, 2026Updated 5 months ago
- Mirage is a PoC memory evasion technique that relies on a vulnerable VBS enclave to hide shellcode within VTL1.☆115Feb 25, 2025Updated last year
- Minimalistic HTTP(S) client for the NT kernel☆61Dec 1, 2025Updated 11 months ago
- Azure Blob Storage C2 Profile for Mythic☆30Sep 28, 2026Updated last month
- A bunch of shenanigans using functions, VEH and more☆38Jun 8, 2025Updated last year
- SACL Scanner is a tool designed to scan and analyze SACLs.☆53Feb 13, 2025Updated last year
- Alternative Read and Write primitives using Rtl* functions the unintended way.☆79Aug 25, 2025Updated last year
- Porting of NPPSPY by Grzegorz Tworek to 'man in the middle' the user logon process, and store the user's name and password in an unassumi…☆20Apr 24, 2023Updated 3 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- Run native PE or .NET executables entirely in-memory. Build the loader as an .exe or .dll—DllMain is Cobalt Strike UDRL-compatible☆279Jun 18, 2025Updated last year
- ☆25Sep 6, 2025Updated last year
- Shellcode Loader Utilizing ETW Events☆66Feb 26, 2025Updated last year
- PIC shellcode (C/C++) development toolkit designed for malware developers.☆136Dec 23, 2025Updated 10 months ago
- ADSIsearch is a Beacon Object File (BOF) to query Active Directory using ADDS, ADSI, and Network Management WinAPIs.☆10Feb 23, 2025Updated last year
- Windows C/C++ development environment on Linux☆18Mar 29, 2026Updated 7 months ago
- .NET port of Leron Gray's azbelt tool.☆25Sep 21, 2023Updated 3 years ago
- Command Augmentation support for BOFs and .NET assemblies across agents☆53Jul 30, 2026Updated 3 months ago
- 渗透测试人员可以通过此BOF，将非托管 Windows可执行文件加载到Beacon内存中并执行它们，检索输出并将其呈现在 Beacon 控制台中☆13Mar 18, 2025Updated last year
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- Usermode NT Explorer - Query kernel addresses, translate virtual to physical addresses, inspect the PFN database, and more.☆93Mar 16, 2026Updated 7 months ago
- Reports on Driver, LSASS and other security services mitigations☆35Aug 18, 2025Updated last year
- ☆21Feb 13, 2026Updated 8 months ago
- ☆41Nov 25, 2025Updated 11 months ago
- vm_str.hpp is a header only string obfuscator.☆115Aug 24, 2025Updated last year
- Finding Truth in the Shadows☆126Jan 26, 2023Updated 3 years ago
- XPN's RpcEnum but based on IDA instead of Ghidra☆20Aug 17, 2019Updated 7 years ago
- Collection of Win32 with C++/Assembly for Hooking, Patch and Reversing PE file☆18Nov 7, 2022Updated 3 years ago
- Comprehensive Windows Syscall Extraction & Analysis Framework☆175Aug 30, 2025Updated last year
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- Proof of concept demonstrating a method of proxying syscalls indirectly☆10Jul 3, 2024Updated 2 years ago
- [fork] Library for lifting of x86, amd64, and aarch64 machine code to LLVM bitcode☆13May 8, 2026Updated 5 months ago
- A cross-platform C++ framework for building Windows shellcode☆179Sep 14, 2026Updated last month
- ROP gadget-based sleep obfuscation technique☆14Aug 10, 2025Updated last year
- A powerful Windows UI monitoring and DNS exfiltration tool written in Rust, combining advanced UI event capture capabilities with secure …☆20Mar 6, 2025Updated last year
- Extra cmdlets to help with quering security related information from Azure☆15Jul 28, 2026Updated 3 months ago
- Beacon Object file set service sd☆11Mar 6, 2023Updated 3 years ago